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m m m 

[0001] ^mmtt. :^yhr7-^^^vxmi^mm^mmir^m^mm.m^^-y<mim 

[0002] M14liE^#(Attribute Certificate) mn(D^mmmmWi!)^^A^^mmir^<D 
<DXh^^ lETFdntemet Engineering Task FoTce)<D^i^^X.509X^(Dj±M'd^'^^ 
IBSi^iiE^CCertification Authority)-^?}* J5i< . Mi4ISIiEiilill(Attribute Authority)(J: 

xoxn^ti^o ^(DXoiz. ^A\^tm\it<Dmu^^n^Wi^\'t. oAsis(fli5t>fb 

tt^^2p'tejt^^)<^^2p-efc6SAML(Security Assertion Markup Language)-e^> 

mAtihtixis^^m^<Dm±mmi^x^h^?i^>^^tct^^fcmwmm'fi'^^ 

'^mi^l^. Federated IDi:V>9ffUV>mtiEi^— lf><>©^ili^^:t>07^^;^5oTV^5(^Jx.^^ 

[0003] ^(Dmi^mmmi^'f-^m-i. ft^ . mx. ¥ft^> ^m. mmm^. nm. mm 

^AuthorizedJSti^, ^^(C'|@A<^ftlC-C^8?)btv§DiscretionaryJH4;aSfe«9. ^tl 

[0004] w^-t?. m^'f—^^-¥mmmt\.xmoh(DtL'X^ \c^vzf¥i^(n>^^-j'yYti— 
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xmi0m. )o t)>^^^!i^wxm'^n. mmn^m^^ti^. mm<Dm^i^^M^x 

[0005] *fc. ^5/hr7— >5^^^bT<7)ii{t{-*5tt^^liEi^;^7^-^l;i-C. ^|iEi^— /<?;6S^^<7) 

[0006] ^#fF:S:jSfel : FC 3281 on An Internet Attribute Certificate [^^ 1 5^8M 4 0 tfef^ 
]^>^i5'~-^ryh< 

http://wwwl.ietf.org/mail-archive/ietf-announce/Current/msgl8344.html> 
##fF:SCiS^2 : Liberty Alliance [5p^ 15^8^ 4 0 ^^PjID-f ^5/h< 
http://www.projectliberty.org/ > 

#rF3ti^l :#^2001-325526-^<i^#(m4-5M. Ell) 
#rp:Scm2 : #§i2001-244927-^<2f^(||3-4H. 0 1) 

[0007] ^^;5-^^ ttfJ!feU:feAuthorizedJH4otti-e. '9»!;t^^?B^^^i5-^ji^R®M. #M<f # 
1®A<^«'l4i:LTgix.^t^^iJ?feii!:55^V\ -^yx-fi^l^at^i^SV^T}*. ;57— m#(D 

^^:lSI^ELTt>b5^®AJR^4^mi^--lf^<^ttm^3^SMmS^^^'r'fe5o 
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xotvx\^^r.mmcmM\^mvx\^^^!i^^mi'its:<.^ti^*tii!)m^^ 
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So 

\^xmm^fi^^—-^mmi^xv),y'-^^--^iz.mm^tix\^^^mi^mm(Dfpif)^h 

[0012] ^^-c% |±jbit^^^(tS#^«. ^-if ^gfctt tea— 
S^-^^«9#/<ev^)t>tM(cfeS^i:?^#i5[^-rs^i:;6S-t?#5o 
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D=l:fflv^fc^^^^:^<5v^T. um\^=^-vmm^m^. m^^mm^mmmi^um^ 

[0014] ^ci-e. :L<D^^^mt. f—^^—:^K^i(fy^fix\^ ^s;!jp A#<^Mtttt#<^ 

i-^^t^^X^^o ^(Dig^ill/=i— KSft^^fi^ l-out-oFN OT(Oblivious 

[0015] m<Dm^i^^hmx.^t^ ^^^mmamm^fi^mmmmmm^-^^n. m^^tic. 

[0017] «fc. :*:^BJ;0S5g^$tT.5JRteit^ti^i^-^^«^ 1g^oJS14if ^Sr^tfUa- 
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. is.m^=^ —vm^^^ j;«9^5/hr7 -^^^^f^bT m^^^o 
[0018] ;io^^w=i— ^-t\.x(DmMiDKMit^Hi^xumi^=' 

K^^^^f*. ^y^yif T>^h^>^;=^:7r— (ObUvious Transfer)<DBt-^fi^ 

[0019] :^^m^:^m(D:fy'r=^Vib^hiE:k.^t^ ^^m7!)mm^Mm\^^m.m^:i7 

mit. ^^yhu—^^^L.x^:^fiti::^—^mmib^h(Dmm^m'^%. it^ojsttif 

■^^yVV—^^^\jX^n-^-:^'Tv'f}i^ m%(r)\^^—Y<n>^t^hWSi^f\.tL'm'^(0 

mmir^^Tiy:ft^ ^^yh'^-^^^i^xmm^m^mmm.^^humiu^my^^fcm 
mmK^^yhvf—i^^^vxmm'r^::^y'^y^t^ ^tPo ^(Dmmmmmm-i. 

l-out-of-N OT(Oblivious Transfer)(Z):/^^=t/V^ffiV^-C^.^$tLSr^^#^i:i-§:l 

[0020] mcm(Dm,M,i!)^iomx.?>t. ^mm7!)mm^ti^m^mmmm:^mit. m^m(D 
m^\^^-v(o^t^hmm<Dmmmu-^ifix±)^^fifium 



wo 2005/022428 



7 



PCT/JP2004/011831 



3— K<^^#^^^^{t§;5?.7"5':/^. '(g?illD(c^^£:i-S^?ilV'=i~K^7'— i5'-<~ 

[0021] *fc^|c|§?g}i, ^ryM7->^^^bTJIH4if #^li#^-rSfci?)OjR14if 

UT«2M-t-^i^;65-e#;5, ^(D^^Hi/^i^^a^'fc'^— iJ'tii^bTli^^-t-^S^l;!. -gaix. 

DVD-^cB-ROMm^mm^i^^^xzfti^yj^Tiim^^hf^. y 

'7^yiy:^ROMmi^^<D-^^i!fvJ^^mm^tiXMn^tl^o ^tv^c^^ycii^^A 

o 

■d^hm^(Dm^mmi::Mir^^—'^mmt>^h(Dmi^^:^^yh^—^^if\'\^x^n^m 
iD^^yhu~^^iff\.x:=^—^mmi^mmir^mmt^mm.^'tt^o 
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[0023] m(Dm^^^hmK.^t. :^mm7!>mm^tl^-:^^^9J>>i't. ^i/h!7~i5^^in^bTM 

[0024] ^mmi^xtiii:. m^mm^w^mmnK mx.it!K^i^mx(Dmi^mm<D--^^ 

[0025] ur. mHmm^^mLrr:. :4^^m(Dmm<Dmmiz.o\,^xmm^m.mir:5o 
^tvxm\^^^^—^mm3o.mm.m\^i)mm'r^i^y-cTi^h^^x^^m^m 

±iz.mhtifc^j^ti^f^y'—^^—:^-^—^<^m^mnm^^—^<iotvx:^mm 
mm(Diy:^'rJ>,^mm'r^^thxt^u ±mM^^h'7^yh(DXo^£mcfcmmx 
^mm^m(Di^y^TJ^^mmir^:ithx^^o 

So ^(DumiD(Dmn^m^tvx^ ^—\f:^^viy<-c^(D^M.xh^:=^—i'mm 
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S^4^f ^Smsmso (ei^tt-fcJ?) (DviDb— i^>'(Dmft ;^5^^^n^o 

^^lOtiifi^i-So SSLCSecure Sockets Layer)jfe^<DBt 

t>X%^o *fc. if ^®30<DM|iEt>, iiS«7>HTTP(Hypertext Transfer 

Protocol)T'5e4t)biX-CV^^Basic^|iE7fc^^^9r:i:t>Rrtg-efeSo 
VIDh— i5^i^(Da^fS-C'}*. r^g30f*. ^#L^VIDh-^:xSrSMTP(Simple 
Mail Transfer ProtocoiyjJif(7>7<— /V>^nh=i/V'>|:fflV>-CJR14tt#^'ftigg50lJl5l^ 

[0029] ®141t#^ft^g50-C«. ^-if^^30d^bOVIDh-i5^>-<D5l#i:. Mttlf # 
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[0030] ^mM<Djf^mx'it. ur<D2-D<Dm^mi^^mm^mt\.xm\^^x\^^o 

*-f , Ml<^9^-^^W\^s T;:^h7^^:^:7r— (OT:Oblivious Transfer)-^fcS 

o 1-out-of-N OT{i, N^@<7)^t^^^^o1^— /^i:, ^(D^ib<Dl-D^m^fc\^^94T 

MA/fcd^^JH41t^ti#ti^-/^10J*^«9#5feV\ i^^ l¥^{*:SCi^[Naor, M. and 
Pinkas, B.: Oblivious Transfer and Polynomial Evaluation, in proc. of STOC, 1999.] 

[0031] ^2(DBt-^fi^^{*. m'^mwc<Dmmmikxh^o mmmi^^i^-^^Mmmm^mm. 

EpkOOfi. 

Epkl(Epk2(X)) = Epk2(Epkl(X)) 
^«fci-o ^Jx.{i. =^5iBi-5:3^/^;!^fN'MElGamal)l^t-^)^j:^^i2p|lM^4S^^rU-CV^S 

o 

[0032] ^r-c% m 1 K^-rmi^mnmiii^:^y'j>>i^xmn^ti^^':^x2h=iM^-D\^ ^xm, 
h^o mi(D^w-m^m^0m\.xnmir^t. :^^yhx7-i^7o^^\.x^-^ 

^g30;?)^bJR^4^t«li#t1^— ^^lOlC^b. '(K^IDCVID : VirtualID)^-^tf^^ID 

g Ait #(W^i^=»-K)d^bifti.SrVIDb— iJ^V<^T-e5i^i-5^^«rM^ 
i-^(:^7"5/:^202)o M141t^»#^i^— ^^lO-Ci*. ^5z&i-§GID(Globally-umque 

iyhl7— ^70^:^U-CViDh--i5':/;65^ff^tbS(:^7"5/:/204)o 
[0033] ^<om. ^-if ^a30;J)^bSmf ^^{ramsOfC^b. VIDb— 
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[0034] m^. ^mm(D^m7!)mm^M^m^^m(Dy^-h*^:x.rmm^<>\^ ^xm^m-r 

So 

fcmxtb^o 

igSf^^i-^^-t'^— ^^e?*, ?g^#^-^fcSCPU(Central Processing Unit: 1^ 

:}3j;TJ«CPU^^;5^^in'L-CCPU101 103, |^C<M/B'f-5'>^ 

■fe5/M02*5j;U5AGP(AcceIerated Graphics Port)^Sr^U-CCPU101lc:g?J^$*iyS:tr 
7*:^;^— KlO4^'0i^TV>5o i^lt. PCKPeripheral Component InterconnectV^;^^ 
i^M^-CM/B^^'^-fe^y h 1 02 tvfca^7=V;^i^igg(HDD) 105, j3 J:tJ5^5/ 

h!7— :7Jl^;^l06^^b-CV^§o ;i(DPCi/^;?^;6^b:/ys'i^Ieij8&i07 

*3a;mSA(Industry Standard ArchitectureV^>^/.Cif <7)ig;3^3^Cx^;:^Sr:^UTM/B^5/ 

09t^mx.x\^^^o 

m^lt. \fv':t:^—Vl04^mn^nit>mz, \fy':t:^^V<D^^mm.U CPUlOll^: 

x^pi-i^y'-i^^^m-r^mf^tx^xh^^^^ ^tc. Mmmmmtx^x. atacat 
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Attachment)J^SCSI(Small Computer System Interface)?fe^*(D-YV^'-:73i^;:^^|r^ 
L-Cx CD-R(Compact Disc Recordable)"^DVD-RAM(Digital Versatile Disc 
Random Access Memory)<^K7^y^^tg»tS::i1>RrtB-efe5o 

[0036] m^. ^Mmmm<Dmi&mmmm'^-^<ioic:i6n:6mmmm^. m4^m\ ^xm 

-'^tvxmmir^viDh—i^>mnui4^m^x\/^^o *fc. mMi^=i—v<Dm^m 
mmmmi^=^—vm^^mtvx^umi^^—v0mmmms^xxmm\^=^—h* 
i§tTia5i9^#;tTv>So w.i^. mK.itmsiz^'tm^v'^y^^mMioQ^m^^x. m 
A^xh^^-"fmm30(Dm^^=t—v-^^m^=^—h^^^m-r^f—'^^—:^2o 

[0037] :=.(Dy^—^^—:^20Xti, Esic^f J^^'^C't"— ://v"e^A{f #5^1?aLrv^s„ 

D(Globally-unique lD)^^—tL-X^^^nX\^^^o -^UT. ^^^^hm^(D~M7^^=x 

$tvfct><^^. UMir>^^—tVX^mir^h<Dt\^x\^^^o msiz^irXoi^. m 
tt-c*5«9x -(S^iD-efcsrvoioioij^rvoiooiijiTii. . M^j^ofcMtiff 

[0038] ^^1/3— K^^la511«:> ^K^fflUDtD^frfJi^b. 7^— :^20J;^);!jpA#T*fc 
if^e30<Dre^ix=i~K^^t9tbb. ^m<Dtim:i. 
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[0039] ^KiSi/^^—K^fi^gBiaf^, ^—^mW:30izxt^^m:^tifcmi^fcif^=^}i'—Vfc 

viuh—i!^>^nm4xu^iRmi^=^—h'^0.m3icx<>x^m^titcmmiJ^t^ 

[0040] ^^1^=1— K#M^3gia5i8-ef*. um\^='—v<D0mizi^\^x. mm^m(Dmm 
vfcmi^mn^inmrn^oit^ mm(Dx^iz. mx-it-^^v^-f^m^^^x, viDh— ^^^^ 

So m^i^x^xi-i, iBim^=^—h'mmmmmiS'>^mMi^=^—h'^nm9i^x. m 

[0041] m^. Mtttf #lt#ti^-/^lO^;lT^^T$tLS^^ID$^Sg#Mo^S^^:ov^Tl^i 
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oT({s_i,..,s_n})ie:ov ^xm.m'T^o 

*-f . M14l*«l»i^— ^^10}*. ^a67i^i5*'AlclS^g<^fi£ $t_s ¥in Z_q$ ^^J^b 
$Q_0 = glt.s} ¥pmod p$ 

jstfeif ^^^t^gsof^i. $t_u$ -^^ViJ^i^ic: $z_q$ t^^mxf. ^(D^Amm 

$Q_u = g"{t_u} ¥pmod p$ 

(Dmm^mXothX\^^^h<Dtir^o ^<Di:#. . 2;^ ${(0, Q_0). (h. Q_u)}$ ^ii 
^X^fJ:m^m^ $Y(x)$ Sr. 'e?!l;^^^^i^^Vv?^<DM^^^^oT-mt-^^i-S 
o :i(D#^^^1^oT. $n$ .-^ $Y_I = Y(i),i=0,..,n-1$ trfh^U. $¥{Y_1.Y_2,.., 
Yji¥}$ ^JRtiif ^^lOlCo^So 

tvx. m^mmsj$^m-^iti.tih(D sejKsj.yj). i=i....n$ ^m\tmn^mmm 
m^mm^mmmson^ $h$ izxoxmm^ntcm^-D^^^xi-i^ ^tucMmir^ 
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[0043] ^tV-r% _hiBOOT7'nh=3/V(Cj:oT. H(VID)# @ (DU^i—V^W^ir^^tt^'C 

{ VIDJ , Attrji.l), ... Attrji.m}} 
:itb%kj = H'(VIDj) iiLX. MtiSr»t-^^[^bTiy.T<DJ;9lJ:i-5o 
s_i = { H(VID_i), E_k_i(Attrjnl). .... E_k_i(Attr_m)} 

^L-COT({s_l,...s_n})Srtf \ 

sj = { H(VIDJ), EJcJCAttrjnl), .... E_kJ(Attrjn)} 

^W^ir^^bifiX^^^ rtb$rkj=H'(viDj){ca;or^-^i-Sr^i;ia;o-c. m^<D 
[0044] Pi&LfcJ;5 (c. ;*:||Jgo?!^^-Ci* . ^-f . ;ftP A#-CfcS^-if ^g30{i. 
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[0045] :L(D-:fvih=iM^^i1r^±^^])'r^(DmWtLX. 

(1) ^Aff Kf*. GIDi!V>5lDSr:7'7-r-vy— df^— ^LT. -r— ;^20± 

(3) ^raA^Tfc^^— if^e30}*. ii>(^GIDW=i— Ko^-^.^^l+a^CJRtfeif 

AttributeCGID) OR Attribute(VID) = Attribute(GID) 
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[0047] u±(Dxt>fmm^x^x. ^mm(Dmwi-vi^s mAmm^^^mmmi^mmm 

•^ISPClntemet Service Provider). ^yh±(DWim^^hmXhX<. *PA#(^— if^ 
[0048] . K g ;!JPA#(^— if ^g30)^i@ A 

tf ^^t^^v ^mm{m^mmmm'^-^no)(D^m<^mA^ s ^^^^^ufcmi*^ 

mmm\^imi&mm^mmm50M^MAmi=^—-^mm3o)i!)>hm^fvr:iumir> 
^m\^mn^immm5om i^xmm^umiDfmxnt>f\.^(DX\ mA^mm 
tib^x^fi:\^\ ^(Dw^, :i(DiRmiD<D^ifm\^^. M\A^(.^—i^mm3o)(Dn^ 

lOM^ l-out-oFN OT(Cj;oT. if OAPA#(^— if^M30)<^'IS?ilID^^^$tT.-C 
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[0049] :if^mm(Df^mmt\.xi-i. mtf #ii^1^-/^i:L-cfflv^b^L^i^-^^. ^—^m 

If^T'n/^^iJf^L-Cilffl^tV^atiff ISPOntemet 
Service Provider)^^g!ll^M. iyB^y^-^^hti:t^ii^^^hMo -^—"ify^-^^^^^^t 

[0050] mi:\^mm(Dmm7imm^Mmi^mmm^^^^TM^mH^i^:^TJ>d<D^^ 

o 

[0051] lo-M^4^t#ii#^1^w<?(flaAtS^i^-^^). ii-m^i/^-m^lfis. 
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^>yhu-^^ift-vxmm^ti^=^--^mmKx<o.7'-i^^-:^iz.^m^nx\^^^ 
mm^—^mm^x<>xm^^fi7'—'$'^—y^Tb^h^%m^ntcmmm<>7b^(Dm 
ttimum^^—\^(D^—ti.x(DumiT)^m^^—'fmmz.mmir^^^t. 

^^yh'p-^^^vxmu^fh^^—'^mmicttimumiD^m^'r^m.mDmm 
:^^yhu-^^^vxmm^th^m^mm^mmmi!)^h(Dmmmmir>^m\^^tim 
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HfflB<RBV'=i— Kli^#^}*. 1-out-oFN OT(Oblivious Transfer)(Z>:/nb=i/V^ 
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[13] ttflE^KSWa— KM^^^f*. :^y^yifT;^h7V;?<.:7T— (ObUvious Transfer)<Dllt 

^■mm^m\^^xmmum^=^—V(Dm^^mm.'r:5^t^wmtir^m^mimm 

^^^yhX7—^^^LrX^if^:^^^yyt. 
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[16] tiflStt##fl^^^{*x l-out-of-N OT(Oblivious T^ansfe^)(D:7'^3^=«/^^fflV^-C/cC 

j^nm^i^Mvxmmmm^^=^-v^m^'r^:^T>y:ft^^. 

[19] mm s M(D=^>'ii'^—^mm^ift'\^x^ ^^mmm g M(Dmm^=^—V(D^:A^hm^ 
m^^tiitmm^m(Dmi^i£n^m\^ti-^mmmmi-=^-h^^^m^xmm'T 

[20] :^iyhu-i^^^L.xmmnn^m^-r^fcib(Dmi^mmmm-^-^<tvxmmir 
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